Security context

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

src/SigningHelper.php: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: Insecure V4 POST policy generation allowed signature validation bypasses because the target bucket was not tightly bound in the signed policy conditions. Attackers could reuse signed policies to upload files to unauthorized buckets. Developers must ensure that all generated signature policies strictly constrain bucket identities.

Path Traversal: The `StorageObject::downloadToFile` method was vulnerable to path traversal because it did not validate the destination file path. This allowed malicious downloads to write to arbitrary local paths outside the target directory. Future implementations of file-writing APIs must explicitly reject relative segments, absolute paths, and alternate drive letters before opening resource streams.